veryfront 0.1.1185 → 0.1.1189

package/esm/cli/commands/serve/proxy-extension-composition.js

@@ -0,0 +1,123 @@
+/**
+ * Standalone proxy extension composition.
+ *
+ * This CLI/deployment boundary activates provider implementations before the
+ * provider-neutral proxy runtime is imported. Core consumes only the
+ * `TokenCacheStore` contract published by the extension loader.
+ */
+import { cliLogger } from "../../utils/index.js";
+import { ExtensionLoader } from "../../../src/extensions/index.js";
+import { importFirstPartyExtensionModule } from "../../../src/extensions/first-party-import.js";
+import { getEnv } from "../../../src/platform/index.js";
+import { createProxyShutdownAggregateError, registerProxyShutdownHook, } from "../../../src/proxy/shutdown-hooks.js";
+// This module is evaluated before extension activation. Pin promises created
+// by the later teardown path so extension code cannot replace Promise species
+// or prototype hooks underneath CLI-owned lifecycle work.
+const NativePromise = Promise;
+const NativeTypeError = TypeError;
+const createObject = Object.create;
+const defineProperty = Object.defineProperty;
+function pinCompositionPromise(promise) {
+    const descriptor = createObject(null);
+    descriptor.configurable = true;
+    descriptor.enumerable = false;
+    descriptor.value = NativePromise;
+    descriptor.writable = false;
+    defineProperty(promise, "constructor", descriptor);
+    return promise;
+}
+const resolvedBeforeExtensionActivation = pinCompositionPromise(new NativePromise((resolve) => resolve()));
+const CACHE_EXTENSION_SOURCE_DIRECTORY = "ext-cache-redis";
+const CACHE_EXTENSION_PACKAGE_NAME = "@veryfront/ext-cache-redis";
+/**
+ * Activate the standalone proxy's explicitly selected cache extension.
+ * Memory mode performs no extension import. The returned loader owns provider
+ * teardown; the proxy borrows its registered `TokenCacheStore`.
+ */
+async function activateStandaloneProxyCacheExtensionInternal() {
+    const cacheType = getEnv("CACHE_TYPE") || "memory";
+    if (cacheType !== "memory" && cacheType !== "extension") {
+        throw new NativeTypeError("CACHE_TYPE must be memory or extension");
+    }
+    if (cacheType === "memory")
+        return null;
+    const module = await importFirstPartyExtensionModule(CACHE_EXTENSION_SOURCE_DIRECTORY, CACHE_EXTENSION_PACKAGE_NAME);
+    if (typeof module.default !== "function") {
+        throw new NativeTypeError(`${CACHE_EXTENSION_PACKAGE_NAME} must export an ExtensionFactory`);
+    }
+    const loader = new ExtensionLoader(cliLogger);
+    try {
+        await loader.setupAll([{
+                extension: module.default(),
+                source: "config",
+                origin: "standalone proxy cache selection",
+            }], {});
+        return loader;
+    }
+    catch (error) {
+        try {
+            await loader.teardownAll();
+        }
+        catch (cleanupError) {
+            cliLogger.error("Failed to clean up standalone proxy cache extension", cleanupError);
+        }
+        throw error;
+    }
+}
+/** Start explicit standalone cache composition with a pinned lifecycle promise. */
+export function activateStandaloneProxyCacheExtension() {
+    return pinCompositionPromise(activateStandaloneProxyCacheExtensionInternal());
+}
+async function registerStandaloneProxyCacheExtensionTeardownInternal(loader, registerHook) {
+    if (!loader)
+        return () => resolvedBeforeExtensionActivation;
+    let teardownPromise = null;
+    const teardown = () => {
+        teardownPromise ??= pinCompositionPromise((async () => {
+            // Suspend before entering extension code so teardownPromise owns
+            // reentrant calls before loader teardown can begin.
+            await resolvedBeforeExtensionActivation;
+            await loader.teardownAll();
+        })());
+        return teardownPromise;
+    };
+    let disposeHook;
+    try {
+        disposeHook = registerHook(teardown);
+    }
+    catch (error) {
+        try {
+            await teardown();
+        }
+        catch (cleanupError) {
+            throw createProxyShutdownAggregateError([error, cleanupError], "Failed to register and clean up standalone proxy cache extension teardown");
+        }
+        throw error;
+    }
+    return () => pinCompositionPromise((async () => {
+        let disposalFailed = false;
+        let disposalError;
+        try {
+            disposeHook();
+        }
+        catch (error) {
+            disposalFailed = true;
+            disposalError = error;
+        }
+        try {
+            await teardown();
+        }
+        catch (teardownError) {
+            if (disposalFailed) {
+                throw createProxyShutdownAggregateError([disposalError, teardownError], "Failed to unregister and tear down standalone proxy cache extension");
+            }
+            throw teardownError;
+        }
+        if (disposalFailed)
+            throw disposalError;
+    })());
+}
+/** Register exactly-once provider teardown with the proxy's shutdown owner. */
+export function registerStandaloneProxyCacheExtensionTeardown(loader, registerHook = registerProxyShutdownHook) {
+    return pinCompositionPromise(registerStandaloneProxyCacheExtensionTeardownInternal(loader, registerHook));
+}

package/esm/cli/commands/serve/split-mode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"split-mode.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/split-mode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,gBAAgB;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AA4BD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,oBAAoB,EAAE,MAAM,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMxB;AAwDD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,SAAS,SAAQ,EACjB,gBAAgB,SAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CASlB;AAwBD,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF3E"}
+{"version":3,"file":"split-mode.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/split-mode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,gBAAgB;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAwBD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,oBAAoB,EAAE,MAAM,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMxB;AAwDD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,SAAS,SAAQ,EACjB,gBAAgB,SAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CASlB;AAwBD,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF3E"}

package/esm/cli/commands/serve/split-mode.js

@@ -12,17 +12,13 @@ const REQUIRED_ENV_VARS = [
     "VERYFRONT_PROXY_API_BASE_URL",
     "VERYFRONT_PROXY_API_CLIENT_ID",
     "VERYFRONT_PROXY_API_CLIENT_SECRET",
-    "REDIS_URL",
 ];
 const STATIC_ENV = {
-    CACHE_TYPE: "redis",
-    REDIS_PREFIX: "vf:token:",
     VERYFRONT_SERVER_REQUEST_TIMEOUT_MS: "90000",
     NODE_ENV: "production",
     PROXY_MODE: "1",
     PRODUCTION_MODE: "1",
     VERYFRONT_TRUST_FORWARDED_HEADERS: "1",
-    SSR_REDIS_CACHE_ENABLED: "true",
     PROJECT_MAX_CONCURRENT: "1000",
     PROJECT_CIRCUIT_THRESHOLD: "20",
     PROJECT_CIRCUIT_RESET_MS: "15000",

package/esm/cli/commands/skills/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/skills/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAOxD,UAAU,eAAe;IACvB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAyBpF"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/skills/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAWxD,UAAU,eAAe;IACvB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAyBpF"}

package/esm/cli/commands/skills/validate.js

@@ -7,7 +7,7 @@ import { createSuccessEnvelope, isJsonMode, outputJson } from "../../shared/json
 import { exitProcess, logError, logSuccess, logWarning } from "../../utils/index.js";
 import { createFileSystem } from "../../../src/platform/index.js";
 import { basename, resolve } from "../../../src/platform/compat/path/index.js";
-import { parseSkillFrontmatter, SKILL_NAME_REGEX, validateSkillMetadata } from "../../../src/skill/index.js";
+import { isValidStrictSkillName, parseSkillFrontmatter, validateSkillFileMetadata, } from "../../../src/skill/index.js";
 export async function validateSkill(args) {
     const dir = args._[2] ?? ".";
     const issues = await validateSkillDirectory(dir);
@@ -27,7 +27,7 @@ export async function validateSkillDirectory(dir) {
         const parsed = await parseSkillFrontmatter(content);
         const directoryName = basename(resolve(dir));
         validateCanonicalFrontmatterName(parsed.frontmatter, directoryName);
-        validateSkillMetadata(parsed.frontmatter, directoryName);
+        validateSkillFileMetadata(parsed.frontmatter, directoryName);
         if (!parsed.body.trim()) {
             issues.push({ severity: "warning", message: "SKILL.md body is empty" });
         }
@@ -42,7 +42,7 @@ function validateCanonicalFrontmatterName(frontmatter, directoryName) {
     if (typeof frontmatter.name !== "string")
         return;
     const name = frontmatter.name.trim();
-    if (!SKILL_NAME_REGEX.test(name)) {
+    if (!isValidStrictSkillName(name)) {
         return;
     }
     if (name !== directoryName) {

package/esm/cli/commands/task/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/task/command.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,WAAY,SAAQ,QAAQ;CAAG;AAahD,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAsGrE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/task/command.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,WAAY,SAAQ,QAAQ;CAAG;AAahD,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuGrE"}

package/esm/cli/commands/task/command.js

@@ -43,6 +43,7 @@ export async function taskCommand(options) {
             fsAdapter: adapter.fs,
             cacheKey: configCacheKey,
             debug: options.debug,
+            allowHostProjectCodeExecution: true,
         });
         logRuntimeDiscoveryWarnings(discovery.errors, options.debug);
         const task = findProjectRuntimeTask(discovery, taskName);

package/esm/cli/commands/webhook/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/webhook/handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AA8CxD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD1E"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/webhook/handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAmDxD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4D1E"}

package/esm/cli/commands/webhook/handler.js

@@ -26,7 +26,12 @@ function formatWebhook(webhook) {
 async function handleWebhookList(_args) {
     const projectDir = dntShim.Deno.cwd();
     await withProjectSourceContext(projectDir, async ({ adapter, config }) => {
-        const result = await discoverWebhooks({ projectDir, adapter, config });
+        const result = await discoverWebhooks({
+            projectDir,
+            adapter,
+            config,
+            allowHostProjectCodeExecution: true,
+        });
         await outputTriggerList({
             command: "webhooks",
             items: result.items,
@@ -53,7 +58,12 @@ export async function handleWebhookCommand(args) {
     const payload = await readJsonFile(opts.payload, "--payload JSON file");
     await withProjectSourceContext(projectDir, async (context) => {
         const { adapter, config, configCacheKey, projectId } = context;
-        const result = await discoverWebhooks({ projectDir, adapter, config });
+        const result = await discoverWebhooks({
+            projectDir,
+            adapter,
+            config,
+            allowHostProjectCodeExecution: true,
+        });
         if (result.errors.length > 0) {
             throw new Error(`Webhook discovery failed: ${result.errors[0]?.message}`);
         }

package/esm/cli/commands/webhooks/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/webhooks/handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAQxD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5E"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/webhooks/handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAQxD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5E"}

package/esm/cli/commands/webhooks/handler.js

@@ -8,7 +8,12 @@ function formatWebhook(webhook) {
 export async function handleWebhooksCommand(_args) {
     const projectDir = dntShim.Deno.cwd();
     await withProjectSourceContext(projectDir, async ({ adapter, config }) => {
-        const result = await discoverWebhooks({ projectDir, adapter, config });
+        const result = await discoverWebhooks({
+            projectDir,
+            adapter,
+            config,
+            allowHostProjectCodeExecution: true,
+        });
         await outputTriggerList({
             command: "webhooks",
             items: result.items,

package/esm/cli/mcp/jsonrpc.d.ts

@@ -25,7 +25,7 @@ export type JSONRPCRequest = InferSchema<ReturnType<typeof getJSONRPCRequestSche
  */
 export interface JSONRPCResponse {
     jsonrpc: "2.0";
-    id?: string | number;
+    id?: string | number | null;
     result?: unknown;
     error?: {
         code: number;
@@ -54,7 +54,17 @@ export declare class JsonRpcError extends Error {
 /**
  * Create a JSON-RPC parse error response
  */
-export declare function parseError(e: unknown): JSONRPCResponse;
+export declare function parseError(_error?: unknown): JSONRPCResponse;
+/**
+ * Create a JSON-RPC invalid-request response without reflecting validator
+ * diagnostics back to an untrusted client.
+ */
+export declare function invalidRequestError(_error?: unknown): JSONRPCResponse;
+/**
+ * Create a generic JSON-RPC internal-error response for failures outside a
+ * method handler's normal error boundary.
+ */
+export declare function internalError(id: string | number | null | undefined): JSONRPCResponse;
 /**
  * Create a JSON-RPC success response
  */

package/esm/cli/mcp/jsonrpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;GAOnC,CAAC;AACF,eAAO,MAAM,oBAAoB;;;;;GAAsC,CAAC;AAExE,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;CAMjB,CAAC;AAEX;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI1C;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,eAAe,CAStD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,eAAe,CAEjG;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAC/B,CAAC,EAAE,OAAO,EACV,IAAI,CAAC,EAAE,MAAM,GACZ,eAAe,CAgBjB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAgC,CAAC;AAE1F;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EACjF,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;GAKpC,CAAC;AACF,eAAO,MAAM,qBAAqB;;;GAAuC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,yBAAyB;;GAIrC,CAAC;AACF,eAAO,MAAM,sBAAsB;;GAAwC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,4BAA4B;;GAIxC,CAAC;AACF,eAAO,MAAM,yBAAyB;;GAA2C,CAAC"}
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;GAOnC,CAAC;AACF,eAAO,MAAM,oBAAoB;;;;;GAAsC,CAAC;AAExE,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;CAMjB,CAAC;AAEX;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI1C;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,eAAe,CAS5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,eAAe,CASrE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GACrC,eAAe,CASjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,eAAe,CAEjG;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAC/B,CAAC,EAAE,OAAO,EACV,IAAI,CAAC,EAAE,MAAM,GACZ,eAAe,CAgBjB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAgC,CAAC;AAE1F;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EACjF,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;GAKpC,CAAC;AACF,eAAO,MAAM,qBAAqB;;;GAAuC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,yBAAyB;;GAIrC,CAAC;AACF,eAAO,MAAM,sBAAsB;;GAAwC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,4BAA4B;;GAIxC,CAAC;AACF,eAAO,MAAM,yBAAyB;;GAA2C,CAAC"}

package/esm/cli/mcp/jsonrpc.js

@@ -38,13 +38,41 @@ export class JsonRpcError extends Error {
 /**
  * Create a JSON-RPC parse error response
  */
-export function parseError(e) {
+export function parseError(_error) {
     return {
         jsonrpc: "2.0",
+        id: null,
         error: {
             code: JSONRPC_ERRORS.PARSE_ERROR,
             message: "Parse error",
-            data: e instanceof Error ? e.message : String(e),
+        },
+    };
+}
+/**
+ * Create a JSON-RPC invalid-request response without reflecting validator
+ * diagnostics back to an untrusted client.
+ */
+export function invalidRequestError(_error) {
+    return {
+        jsonrpc: "2.0",
+        id: null,
+        error: {
+            code: JSONRPC_ERRORS.INVALID_REQUEST,
+            message: "Invalid Request",
+        },
+    };
+}
+/**
+ * Create a generic JSON-RPC internal-error response for failures outside a
+ * method handler's normal error boundary.
+ */
+export function internalError(id) {
+    return {
+        jsonrpc: "2.0",
+        id: id ?? null,
+        error: {
+            code: JSONRPC_ERRORS.INTERNAL_ERROR,
+            message: "Internal error",
         },
     };
 }

package/esm/cli/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA8CH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,GAAE,eAAoB;IAWxC,KAAK,IAAI,IAAI;IAeP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,OAAO,CAAC,SAAS;IA6FjB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,mBAAmB;IAuD3B,OAAO,CAAC,mBAAmB;IAiJ3B,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,gBAAgB;CAwCzB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,CAIrE;AAED,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgDH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,GAAE,eAAoB;IAWxC,KAAK,IAAI,IAAI;IAiBP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,OAAO,CAAC,SAAS;IAyHjB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,mBAAmB;IAuD3B,OAAO,CAAC,mBAAmB;IAiJ3B,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,gBAAgB;CAwCzB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,CAIrE;AAED,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC"}

package/esm/cli/mcp/server.js

@@ -15,7 +15,7 @@ import { isRequestBodyTooLargeError, readBodyWithLimit } from "../../src/securit
 import { zodToJsonSchema } from "../../src/tool/schema/index.js";
 import { allTools, getTool, setServerStartTime } from "./tools.js";
 import { startStdioJsonRpc } from "./stdio.js";
-import { buildInitializeResult, errorResponse, JsonRpcError, JSONRPCRequestSchema, parseError, PromptsGetParamsSchema, ResourcesReadParamsSchema, successResponse, ToolsCallParamsSchema, } from "./jsonrpc.js";
+import { buildInitializeResult, errorResponse, internalError, invalidRequestError, JsonRpcError, JSONRPCRequestSchema, parseError, PromptsGetParamsSchema, ResourcesReadParamsSchema, successResponse, ToolsCallParamsSchema, } from "./jsonrpc.js";
 const ALLOWED_HTTP_ORIGIN_HOSTS = new Set([
     "localhost",
     "127.0.0.1",
@@ -57,7 +57,9 @@ export class MCPDevServer {
                 isRunning: () => this.running,
                 parseRequest: (payload) => JSONRPCRequestSchema.parse(payload),
                 handleRequest: (request) => this.handleRequest(request),
-                toErrorResponse: (error) => parseError(error),
+                toParseErrorResponse: (error) => parseError(error),
+                toInvalidRequestResponse: (error) => invalidRequestError(error),
+                toErrorResponse: (_error, request) => internalError(request.id),
             });
         }
         if (this.config.httpPort)
@@ -120,11 +122,9 @@ export class MCPDevServer {
                     error: { code: -32600, message: "Request body too large" },
                 }), { status: 413, headers });
             }
+            let bodyText;
             try {
-                const bodyText = await readBodyWithLimit(req, 1_048_576);
-                const body = JSONRPCRequestSchema.parse(JSON.parse(bodyText));
-                const response = await this.handleRequest(body);
-                return new Response(JSON.stringify(response), { headers });
+                bodyText = await readBodyWithLimit(req, 1_048_576);
             }
             catch (e) {
                 if (isRequestBodyTooLargeError(e)) {
@@ -134,7 +134,37 @@ export class MCPDevServer {
                         error: { code: -32600, message: "Request body too large" },
                     }), { status: 413, headers });
                 }
-                return new Response(JSON.stringify(parseError(e)), { status: 400, headers });
+                return new Response(JSON.stringify(invalidRequestError(e)), {
+                    status: 400,
+                    headers,
+                });
+            }
+            let payload;
+            try {
+                payload = JSON.parse(bodyText);
+            }
+            catch (error) {
+                return new Response(JSON.stringify(parseError(error)), { status: 400, headers });
+            }
+            let body;
+            try {
+                body = JSONRPCRequestSchema.parse(payload);
+            }
+            catch (error) {
+                return new Response(JSON.stringify(invalidRequestError(error)), {
+                    status: 400,
+                    headers,
+                });
+            }
+            try {
+                const response = await this.handleRequest(body);
+                return new Response(JSON.stringify(response), { headers });
+            }
+            catch (_error) {
+                return new Response(JSON.stringify(internalError(body.id)), {
+                    status: 500,
+                    headers,
+                });
             }
         };
         const servePromise = httpServer.serve(handler, { port, onListen: () => { } });

package/esm/cli/mcp/standalone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standalone.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA8BH,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;gBAEnC,MAAM,GAAE,mBAAwB;IAM5C,KAAK,IAAI,IAAI;IAWb,IAAI,IAAI,IAAI;YAME,aAAa;IAW3B,OAAO,CAAC,cAAc;YAgCR,eAAe;IAqB7B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,mBAAmB;YAyBb,mBAAmB;IA6CjC,OAAO,CAAC,iBAAiB;YAkBX,gBAAgB;IAwB9B,OAAO,CAAC,WAAW;IAoSnB,OAAO,CAAC,mBAAmB;CA0F5B;AAED,wBAAgB,yBAAyB,CAAC,MAAM,GAAE,mBAAwB,GAAG,mBAAmB,CAI/F"}
+{"version":3,"file":"standalone.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgCH,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;gBAEnC,MAAM,GAAE,mBAAwB;IAM5C,KAAK,IAAI,IAAI;IAab,IAAI,IAAI,IAAI;YAME,aAAa;IAW3B,OAAO,CAAC,cAAc;YAgCR,eAAe;IAqB7B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,mBAAmB;YAyBb,mBAAmB;IA6CjC,OAAO,CAAC,iBAAiB;YAkBX,gBAAgB;IAwB9B,OAAO,CAAC,WAAW;IAoSnB,OAAO,CAAC,mBAAmB;CA0F5B;AAED,wBAAgB,yBAAyB,CAAC,MAAM,GAAE,mBAAwB,GAAG,mBAAmB,CAI/F"}

package/esm/cli/mcp/standalone.js

@@ -8,7 +8,7 @@
 import { getEnv, readTextFile } from "../../src/platform/index.js";
 import { DevServerClient } from "./dev-server-client.js";
 import { startStdioJsonRpc } from "./stdio.js";
-import { buildInitializeResult, errorResponse, JsonRpcError, JSONRPCRequestSchema, parseError, PromptsGetParamsSchema, ResourcesReadParamsSchema, successResponse, ToolsCallParamsSchema, } from "./jsonrpc.js";
+import { buildInitializeResult, errorResponse, internalError, invalidRequestError, JsonRpcError, JSONRPCRequestSchema, parseError, PromptsGetParamsSchema, ResourcesReadParamsSchema, successResponse, ToolsCallParamsSchema, } from "./jsonrpc.js";
 const DEFAULT_DEV_PORT = 8080;
 const NOT_RUNNING_MSG = "Dev server not running. Start with: veryfront";
 export class StandaloneMCPServer {
@@ -29,7 +29,9 @@ export class StandaloneMCPServer {
             isRunning: () => this.running,
             parseRequest: (payload) => JSONRPCRequestSchema.parse(payload),
             handleRequest: (request) => this.handleRequest(request),
-            toErrorResponse: (error) => parseError(error),
+            toParseErrorResponse: (error) => parseError(error),
+            toInvalidRequestResponse: (error) => invalidRequestError(error),
+            toErrorResponse: (_error, request) => internalError(request.id),
         });
     }
     stop() {

package/esm/cli/mcp/stdio.d.ts

@@ -3,7 +3,9 @@ export interface StartStdioJsonRpcOptions<TRequest, TResponse> {
     isRunning: () => boolean;
     parseRequest: (payload: unknown) => TRequest;
     handleRequest: (request: TRequest) => Promise<TResponse>;
-    toErrorResponse: (error: unknown) => TResponse;
+    toParseErrorResponse: (error: unknown) => TResponse;
+    toInvalidRequestResponse: (error: unknown) => TResponse;
+    toErrorResponse: (error: unknown, request: TRequest) => TResponse;
 }
 export declare function startStdioJsonRpc<TRequest, TResponse>(options: StartStdioJsonRpcOptions<TRequest, TResponse>): StdinReader;
 //# sourceMappingURL=stdio.d.ts.map

package/esm/cli/mcp/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/stdio.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/E,MAAM,WAAW,wBAAwB,CAAC,QAAQ,EAAE,SAAS;IAC3D,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC;IAC7C,aAAa,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC;CAChD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EACnD,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,GACrD,WAAW,CA4Cb"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/stdio.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/E,MAAM,WAAW,wBAAwB,CAAC,QAAQ,EAAE,SAAS;IAC3D,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC;IAC7C,aAAa,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC;IACpD,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC;IACxD,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC;CACnE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EACnD,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,GACrD,WAAW,CA2Db"}

package/esm/cli/mcp/stdio.js

@@ -25,13 +25,28 @@ export function startStdioJsonRpc(options) {
                     buffer = buffer.slice(newlineIndex + 1);
                     if (!line)
                         continue;
+                    let payload;
+                    try {
+                        payload = JSON.parse(line);
+                    }
+                    catch (error) {
+                        await writeResponse(options.toParseErrorResponse(error));
+                        continue;
+                    }
+                    let request;
+                    try {
+                        request = options.parseRequest(payload);
+                    }
+                    catch (error) {
+                        await writeResponse(options.toInvalidRequestResponse(error));
+                        continue;
+                    }
                     try {
-                        const request = options.parseRequest(JSON.parse(line));
                         const response = await options.handleRequest(request);
                         await writeResponse(response);
                     }
                     catch (error) {
-                        await writeResponse(options.toErrorResponse(error));
+                        await writeResponse(options.toErrorResponse(error, request));
                     }
                 }
             }

package/esm/cli/mcp/tools/scaffold-tools.d.ts

@@ -5,7 +5,7 @@ import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import type { MCPTool } from "../tools.js";
 import { type ScaffoldResult } from "../../scaffold/engine.js";
 declare const getScaffoldInput: () => import("../../../src/internal-agents/schema.js").Schema<import("../../../src/extensions/schema/schema-validator.js").InferShape<{
-    type: import("../../../src/internal-agents/schema.js").Schema<"prompt" | "page" | "api" | "agent" | "layout" | "resource" | "component" | "task" | "tool" | "skill" | "workflow">;
+    type: import("../../../src/internal-agents/schema.js").Schema<"prompt" | "api" | "page" | "layout" | "resource" | "component" | "task" | "agent" | "tool" | "skill" | "workflow">;
     name: import("../../../src/internal-agents/schema.js").Schema<string>;
     methods: import("../../../src/internal-agents/schema.js").Schema<string[] | undefined>;
     projectPath: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;

package/esm/cli/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA6HpD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0IlE"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAoHpD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyIlE"}

package/esm/cli/router.js

@@ -109,9 +109,6 @@ function commandNameForJson(args) {
     const command = args._[0];
     return typeof command === "string" && command.length > 0 ? command : "cli";
 }
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
-}
 async function outputCliJsonError(command, error) {
     await outputJson(createErrorEnvelope(command, error));
 }
@@ -223,25 +220,24 @@ export async function routeCommand(args) {
         const handler = await handlerLoader();
         await handler(args);
     }, {
-        onError: async (error, vfError) => {
+        onError: async (_error, vfError) => {
             if (!isJsonMode()) {
-                console.error((await import("../src/errors/index.js")).formatCLIError(error, {
+                console.error((await import("../src/errors/index.js")).formatCLIError(vfError, {
                     color: shouldUseColor(),
                     verbose: isVerbose(),
                 }));
                 return;
             }
-            const message = errorMessage(error);
+            const message = vfError.detail ?? vfError.message;
             const isUsageError = vfError.exitCode === 2 || message.startsWith("Invalid ");
             await outputCliJsonError(commandNameForJson(args), {
                 code: isUsageError ? "USAGE_ERROR" : "RUNTIME_ERROR",
-                slug: vfError.slug !== "unknown-error"
-                    ? vfError.slug
-                    : (isUsageError ? "invalid-argument" : "command-failed"),
+                slug: isUsageError ? "invalid-arguments" : "command-failed",
+                registrySlug: vfError.slug,
                 message: vfError.detail ?? message,
             });
         },
-        getExitCode: (_error, vfError) => vfError.exitCode ?? (errorMessage(vfError).startsWith("Invalid ") ? 2 : 1),
+        getExitCode: (_error, vfError) => vfError.exitCode ?? ((vfError.detail ?? vfError.message).startsWith("Invalid ") ? 2 : 1),
     });
     // Wait for update check to finish (with timeout to avoid hanging)
     await Promise.race([

package/esm/cli/shared/json-output.d.ts

@@ -23,7 +23,10 @@ export interface ErrorEnvelope {
     command: string;
     error: {
         code: string;
+        /** Stable classification consumers have keyed on since the first JSON release. */
         slug: string;
+        /** Additive: the error registry slug, for consumers that need finer classification. */
+        registrySlug?: string;
         message: string;
         context?: Record<string, unknown>;
     };
@@ -46,12 +49,7 @@ export declare function createStreamErrorResult(error: StreamErrorDetails): Stre
 export declare function createSuccessEnvelope<T>(command: string, data: T, timing?: {
     duration_ms: number;
 }): SuccessEnvelope<T>;
-export declare function createErrorEnvelope(command: string, error: {
-    code: string;
-    slug: string;
-    message: string;
-    context?: Record<string, unknown>;
-}): ErrorEnvelope;
+export declare function createErrorEnvelope(command: string, error: ErrorEnvelope["error"]): ErrorEnvelope;
 export declare function formatJsonOutput(envelope: JsonEnvelope): string;
 /**
  * Print JSON envelope to stdout.

package/esm/cli/shared/json-output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-output.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAalD;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEvD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAE7C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;CACH;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACxD,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,YAAY,EAAE,kBAAkB,CAAC;CAClC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,CAOpF;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,EACP,MAAM,CAAC,EAAE;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/B,eAAe,CAAC,CAAC,CAAC,CAIpB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxF,aAAa,CAEf;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEnE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE9C"}
+{"version":3,"file":"json-output.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAalD;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEvD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAE7C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,kFAAkF;QAClF,IAAI,EAAE,MAAM,CAAC;QACb,uFAAuF;QACvF,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;CACH;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACxD,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,YAAY,EAAE,kBAAkB,CAAC;CAClC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,CAOpF;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,EACP,MAAM,CAAC,EAAE;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/B,eAAe,CAAC,CAAC,CAAC,CAIpB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAC5B,aAAa,CAEf;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEnE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE9C"}

package/esm/cli/shared/project-creation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-creation.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/project-creation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EACL,KAAK,eAAe,EAGrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,6BAA6B,CAAC;AAarC,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,sBAAsB,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,iBAAiB,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,iCAAiC,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GAC3E;IACA,IAAI,EAAE,kCAAkC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC,CAAC;AAEJ,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,uBAAuB,CAAC,EAAE,CACxB,SAAS,EAAE,YAAY,EAAE,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACzE;AAqWD,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,EAC7B,YAAY,GAAE,yBAA8B,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CA2F9B"}
+{"version":3,"file":"project-creation.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/project-creation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EACL,KAAK,eAAe,EAGrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,6BAA6B,CAAC;AAarC,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,sBAAsB,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,iBAAiB,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,iCAAiC,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GAC3E;IACA,IAAI,EAAE,kCAAkC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC,CAAC;AAEJ,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,uBAAuB,CAAC,EAAE,CACxB,SAAS,EAAE,YAAY,EAAE,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACzE;AAwWD,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,EAC7B,YAAY,GAAE,yBAA8B,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CA2F9B"}

package/esm/cli/shared/project-creation.js

@@ -74,16 +74,19 @@ function generateIntegrationsStatusRoute(integrations) {
  * This file is auto-generated based on the integrations you selected.
  */
 
-import { tokenStore } from "../../../../lib/token-store";
+import { tokenStore } from "../../../../lib/token-store.ts";
+import { requireUserIdFromRequest } from "../../../../lib/user-id.ts";
 
 // Integrations configured for this project
 const INTEGRATIONS = [
 ${integrationEntries}
 ];
 
-export async function GET(_req: Request) {
-  // Get actual user ID from session in production
-  const userId = "current-user";
+export async function GET(req: Request): Promise<Response> {
+  const userId = await requireUserIdFromRequest(req);
+  if (!userId) {
+    return Response.json({ error: "Unauthorized" }, { status: 401 });
+  }
 
   const statuses = await Promise.all(
     INTEGRATIONS.map(async (integration) => {